Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a323030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a323030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          suMIFGjeQQoC2jQZk1J8whMuBEmlaXdQ+5TBhzQq334=
Subject key identifier:   F8:23:81:BD:38:13:0F:0E:5E:67:1E:CA:7E:16:7B:70:0C:7F:EA:D7
Certificate issuer:       /CN=5C7EFAB7DE3678425BB38CB274647243463C6597
Certificate serial:       05FB19961440F70BF7483D3CC87BB25987658880
Authority key identifier: 5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a323030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Wed 15 Jan 2025 13:59:37 +0000
ROA not before:           Wed 15 Jan 2025 13:54:37 +0000
ROA not after:            Wed 14 Jan 2026 13:59:37 +0000
asID:                     270760
IP address blocks:        2804:70fc:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fb:19:96:14:40:f7:0b:f7:48:3d:3c:c8:7b:b2:59:87:65:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C7EFAB7DE3678425BB38CB274647243463C6597
        Validity
            Not Before: Jan 15 13:54:37 2025 GMT
            Not After : Jan 14 13:59:37 2026 GMT
        Subject: CN=F82381BD38130F0E5E671ECA7E167B700C7FEAD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:08:9e:46:aa:bf:3e:8f:3c:1b:c5:de:7c:34:
                    f7:d3:75:ed:cc:b8:a3:76:f4:f0:9d:5a:83:02:ce:
                    53:3a:8d:0c:40:a2:41:4f:d5:aa:ca:54:50:62:bc:
                    7d:d5:d6:c0:8d:c6:c1:5a:9f:dc:22:ba:5a:0f:fe:
                    34:00:83:c2:25:b5:75:67:22:81:75:e8:de:c5:07:
                    a3:99:19:b1:36:69:20:07:16:c1:54:0a:44:6e:35:
                    0a:34:60:4a:6b:a7:43:de:76:80:89:d9:25:8e:9f:
                    68:e4:6a:1e:6c:2d:4d:47:ea:b9:2c:85:0f:4c:37:
                    2d:36:51:be:b9:82:da:74:e5:25:e6:87:ee:a2:ea:
                    65:e7:73:22:1c:07:06:e6:b5:76:4e:55:9e:a6:df:
                    dc:e9:80:d9:58:fd:68:3d:fb:64:50:d4:3a:46:33:
                    ba:ab:b2:45:ff:6e:de:d8:8c:ed:71:96:58:08:56:
                    4d:e8:1e:4a:3e:72:f3:51:70:25:8b:5b:c5:b3:94:
                    a1:ab:56:d4:3e:f3:40:c1:a8:ee:14:19:0a:16:22:
                    58:49:d6:7e:7c:2e:04:0b:cc:f6:91:9a:1d:02:30:
                    43:86:41:f5:fe:1f:3f:78:d0:a2:95:a1:15:a7:f5:
                    f5:a2:39:3b:88:6a:e6:6f:e1:68:8e:c3:21:78:fa:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:23:81:BD:38:13:0F:0E:5E:67:1E:CA:7E:16:7B:70:0C:7F:EA:D7
            X509v3 Authority Key Identifier:
                keyid:5C:7E:FA:B7:DE:36:78:42:5B:B3:8C:B2:74:64:72:43:46:3C:65:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/5C7EFAB7DE3678425BB38CB274647243463C6597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C7EFAB7DE3678425BB38CB274647243463C6597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a323030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3b:60:45:16:1d:de:c7:dc:1f:b7:2c:a1:5f:da:d7:90:09:2a:
         a4:97:f8:c1:c1:1e:ee:4e:24:cd:00:ce:9d:64:7b:75:0e:f5:
         6c:84:05:e6:48:a8:53:0b:71:d0:4f:11:03:51:dd:3d:aa:e7:
         a2:a5:d7:7f:f2:8d:c5:a6:b6:a1:9c:c1:0e:fb:ed:c9:c7:3f:
         18:27:14:b8:ff:f6:c3:e7:fb:c5:1b:ec:39:0b:ca:c7:89:f1:
         58:bb:8b:93:9a:06:18:c7:a0:fa:64:c3:f0:f8:c6:82:50:1c:
         c0:75:19:5b:e8:f9:80:a6:cb:a7:bb:56:04:20:17:0b:9a:ff:
         3d:b1:a6:d2:e2:1d:99:4c:0e:1b:79:94:63:7f:ce:dc:2e:b0:
         1a:4d:02:26:9b:51:e2:6e:c1:e2:b2:f2:a7:47:5f:1b:0b:ce:
         b9:03:46:ae:ad:9d:6e:93:ec:0a:5a:5c:83:19:48:f6:16:c9:
         5a:77:e6:ad:a2:4f:90:41:b9:50:b0:af:a9:8e:10:c2:1a:bb:
         f4:6b:6e:fa:72:6d:05:7f:69:f9:67:f8:f7:69:f0:05:87:31:
         61:3a:69:ca:91:6c:2d:83:7a:e8:96:fb:12:34:a9:b6:c0:27:
         6a:ce:c8:09:bf:bd:f5:2e:c1:32:81:a4:fd:5a:06:fd:d3:0d:
         3a:8e:27:b8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBfsZlhRA9wv3SD08yHuyWYdliIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM3RUZBQjdERTM2Nzg0MjVCQjM4Q0IyNzQ2NDcyNDM0
NjNDNjU5NzAeFw0yNTAxMTUxMzU0MzdaFw0yNjAxMTQxMzU5MzdaMDMxMTAvBgNV
BAMTKEY4MjM4MUJEMzgxMzBGMEU1RTY3MUVDQTdFMTY3QjcwMEM3RkVBRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3CJ5Gqr8+jzwbxd58NPfTde3M
uKN29PCdWoMCzlM6jQxAokFP1arKVFBivH3V1sCNxsFan9wiuloP/jQAg8IltXVn
IoF16N7FB6OZGbE2aSAHFsFUCkRuNQo0YEprp0PedoCJ2SWOn2jkah5sLU1H6rks
hQ9MNy02Ub65gtp05SXmh+6i6mXncyIcBwbmtXZOVZ6m39zpgNlY/Wg9+2RQ1DpG
M7qrskX/bt7YjO1xllgIVk3oHko+cvNRcCWLW8WzlKGrVtQ+80DBqO4UGQoWIlhJ
1n58LgQLzPaRmh0CMEOGQfX+Hz940KKVoRWn9fWiOTuIauZv4WiOwyF4+g69AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU+COBvTgTDw5eZx7KfhZ7cAx/6tcwHwYDVR0j
BBgwFoAUXH76t942eEJbs4yydGRyQ0Y8ZZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXgxREJyNXVpajlyVXVjMzlwSlRpMlBCWXpFaXlCalhtWlBpY0t5NUFl
VU0vMC81QzdFRkFCN0RFMzY3ODQyNUJCMzhDQjI3NDY0NzI0MzQ2M0M2NTk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDN0VGQUI3REUzNjc4NDI1
QkIzOENCMjc0NjQ3MjQzNDYzQzY1OTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV4MURCcjV1aWo5clV1YzM5cEpUaTJQQll6RWl5QmpYbVpQaWNLeTVBZVVNLzAv
MzIzODMwMzQzYTM3MzA2NjYzM2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMDM3MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEcPwgMA0GCSqGSIb3DQEBCwUA
A4IBAQA7YEUWHd7H3B+3LKFf2teQCSqkl/jBwR7uTiTNAM6dZHt1DvVshAXmSKhT
C3HQTxEDUd09queipdd/8o3FprahnMEO++3Jxz8YJxS4//bD5/vFG+w5C8rHifFY
u4uTmgYYx6D6ZMPw+MaCUBzAdRlb6PmApsunu1YEIBcLmv89sabS4h2ZTA4beZRj
f87cLrAaTQImm1HibsHisvKnR18bC865A0aurZ1uk+wKWlyDGUj2Fslad+atok+Q
QblQsK+pjhDCGrv0a276cm0Ff2n5Z/j3afAFhzFhOmnKkWwtg3rolvsSNKm2wCdq
zsgJv731LsEygaT9Wgb90w06jie4
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:22 2025 by rpki-client